# ALAS2023-2026-1487: Security update for 22 packages ALAS2023-2026-1487, released March 16, 2026, fixes 32 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1487 - Platform: Linux - Released: Mar 16, 2026 - Priority: High (Closes CVE-2026-23111, high severity) - CVEs: 32, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1487.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel-livepatch-6.12.73-95.123](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.73-95.123.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0113 | | | [CVE-2026-23193](https://patchblox.com/security/data/cve/CVE-2026-23193.md) | High | kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0036 | | | [CVE-2026-23230](https://patchblox.com/security/data/cve/CVE-2026-23230.md) | High | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 | | | [CVE-2026-23209](https://patchblox.com/security/data/cve/CVE-2026-23209.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 7.8 | 0.0018 | | | [CVE-2026-23214](https://patchblox.com/security/data/cve/CVE-2026-23214.md) | High | btrfs: reject new transactions if the fs is fully read-only | 8.4 | 0.0018 | | | [CVE-2026-23204](https://patchblox.com/security/data/cve/CVE-2026-23204.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 8.1 | 0.0015 | | | [CVE-2026-23224](https://patchblox.com/security/data/cve/CVE-2026-23224.md) | High | erofs: fix UAF issue for file-backed mounts w/ directio option | 7.8 | 0.0014 | | | [CVE-2026-23216](https://patchblox.com/security/data/cve/CVE-2026-23216.md) | High | scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() | 8.8 | 0.0014 | | | [CVE-2026-23156](https://patchblox.com/security/data/cve/CVE-2026-23156.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_g... | 7.8 | 0.0014 | | | [CVE-2026-23223](https://patchblox.com/security/data/cve/CVE-2026-23223.md) | High | xfs: fix UAF in xchk_btree_check_block_owner | 7.8 | 0.0014 | | | [CVE-2026-23168](https://patchblox.com/security/data/cve/CVE-2026-23168.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq... | 7.8 | 0.0013 | | | [CVE-2026-23215](https://patchblox.com/security/data/cve/CVE-2026-23215.md) | High | x86/vmware: Fix hypercall clobbers | 8.4 | 0.0013 | | | [CVE-2026-23161](https://patchblox.com/security/data/cve/CVE-2026-23161.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix race of truncate and swap en... | 7.0 | 0.0010 | | | [CVE-2026-31688](https://patchblox.com/security/data/cve/CVE-2026-31688.md) | High | driver core: enforce device_lock for driver_match_device() | 7.8 | n/a | | | [CVE-2025-71268](https://patchblox.com/security/data/cve/CVE-2025-71268.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths... | 5.5 | 0.0033 | | | [CVE-2026-23177](https://patchblox.com/security/data/cve/CVE-2026-23177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate rac... | 5.5 | 0.0019 | | | [CVE-2026-23154](https://patchblox.com/security/data/cve/CVE-2026-23154.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO... | 5.5 | 0.0019 | | | [CVE-2026-23198](https://patchblox.com/security/data/cve/CVE-2026-23198.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deass... | 5.5 | 0.0015 | | | [CVE-2026-23169](https://patchblox.com/security/data/cve/CVE-2026-23169.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit(... | 5.6 | 0.0014 | | | [CVE-2026-23159](https://patchblox.com/security/data/cve/CVE-2026-23159.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new is_user_tas... | 6.1 | 0.0013 | | | [CVE-2026-23173](https://patchblox.com/security/data/cve/CVE-2026-23173.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing pe... | 5.5 | 0.0013 | | | [CVE-2026-23200](https://patchblox.com/security/data/cve/CVE-2026-23200.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix ECMP sibling count mismatch when clear... | 5.5 | 0.0013 | | | [CVE-2026-23189](https://patchblox.com/security/data/cve/CVE-2026-23189.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix NULL pointer dereference in ceph_mds_a... | 5.5 | 0.0013 | | | [CVE-2026-23201](https://patchblox.com/security/data/cve/CVE-2026-23201.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix oops due to invalid pointer for kfree(... | 5.5 | 0.0013 | | | [CVE-2026-23205](https://patchblox.com/security/data/cve/CVE-2026-23205.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 5.5 | 0.0013 | | | [CVE-2026-23219](https://patchblox.com/security/data/cve/CVE-2026-23219.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/slab: Add alloc_tagging_slab_free_hook for me... | 5.5 | 0.0013 | | | [CVE-2025-71225](https://patchblox.com/security/data/cve/CVE-2025-71225.md) | Routine | md: suspend array while updating raid_disks via sysfs | 5.3 | 0.0013 | | | [CVE-2026-23254](https://patchblox.com/security/data/cve/CVE-2026-23254.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO... | 5.5 | 0.0012 | | | [CVE-2026-23260](https://patchblox.com/security/data/cve/CVE-2026-23260.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() fai... | 5.5 | 0.0012 | | | [CVE-2026-23199](https://patchblox.com/security/data/cve/CVE-2026-23199.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: procfs: avoid fetching build ID while holding VM... | 5.5 | 0.0010 | | | [CVE-2026-23202](https://patchblox.com/security/data/cve/CVE-2026-23202.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0010 | | | [CVE-2026-23212](https://patchblox.com/security/data/cve/CVE-2026-23212.md) | Routine | bonding: annotate data-races around slave->last_rx | 5.5 | 0.0010 | | --- Data as of 2026-11-10T01:44:33Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.